CVE-2025-10543
2 advisories.
Go/github.com/eclipse/paho.mqtt.golang CVE-2025-10543: medium 5.3, EPSS 0.23%
Eclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytes
Action: Upgrade github.com/eclipse/paho.mqtt.golang to 1.5.1 or later.
go get github.com/eclipse/paho.mqtt.golang@v1.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.1 | - |
Fixed versions
| 1.5.1 |
Sources
- osv: GHSA-32fw-gq77-f2f2
- nvd: CVE-2025-10543
- https://github.com/eclipse-paho/paho.mqtt.golang/issues/730
- https://github.com/eclipse-paho/paho.mqtt.golang/pull/714
- https://github.com/alpinelinux/build-server-status/commit/e3487897db32c8c3d0287643f8384a6669e93731
- https://github.com/advisories/GHSA-32fw-gq77-f2f2
- https://github.com/eclipse-paho/paho.mqtt.golang
- https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/254
CVE-2025-10543 · published · modified · JSON
Go/github.com/eclipse/paho.mqtt.golang CVE-2025-10543: medium 5.3, EPSS 0.23%
Eclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytes in github.com/eclipse/paho.mqtt.golang
Action: Upgrade github.com/eclipse/paho.mqtt.golang to 1.5.1 or later.
go get github.com/eclipse/paho.mqtt.golang@v1.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.1 | - |
Fixed versions
| 1.5.1 |
Sources
- osv: GO-2025-4173
- nvd: CVE-2025-10543
- https://github.com/advisories/GHSA-32fw-gq77-f2f2
- https://github.com/alpinelinux/build-server-status/commit/e3487897db32c8c3d0287643f8384a6669e93731
- https://github.com/eclipse-paho/paho.mqtt.golang/issues/730
- https://github.com/eclipse-paho/paho.mqtt.golang/pull/714
- https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/254
CVE-2025-10543 · published · modified · JSON